[Snort-sigs] Sourcefire VRT Certified Snort Rules Update

research at ...435... research at ...435...
Tue Aug 21 19:18:26 EDT 2007


-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA1

Sourcefire VRT Certified Snort Rules Update

Synopsis:
The Sourcefire VRT has continued research into multiple vulnerabilities affecting Microsoft products and has updated a number of rules as a result of this ongoing work. The VRT is also aware of a vulnerability affecting the iPhone from Apple.

Details:
Apple iPhone Safari (MobileSafari) CVE-2007-3944:
Safari for the iPhone suffers from a programming error that may allow an attacker to execute code on an affected system.

A rule to detect attacks targeting this vulnerability is included in this release and is identified as SID 12286.

Microsoft Security Bulletin MS07-042:
Microsoft XML Core Services suffers from programming errors to the extent that it is possible for a remote attacker to execute code on an affected system. It may be possible for the attacker to take complete control of the target system.

A rule to detect attacks targeting this vulnerability has been updated and is identified as SID 12279.

Microsoft Security Bulletin MS07-043:
Programming errors affecting Object Linking and Embedding (OLE) Automation as used in various Microsoft products may allow an attacker to execute code on a vulnerable system.

A rule to detect attacks targeting this vulnerability has been updated and is identified as SID 12279.

Microsoft Security Bulletin MS07-044:
Microsoft Excel may allow an attacker to execute code via a Workspace index value which can be manipulated to cause a memory corruption on an affected system.

A rule to detect attacks targeting this vulnerability has been updated and is identified as SID 12284.

For a complete list of new and modified rules please see:

http://www.snort.org/vrt/docs/ruleset_changelogs/changes-2007-08-21.html

-----BEGIN PGP SIGNATURE-----
Version: GnuPG v1.4.5 (Cygwin)

iD8DBQFGy1ykoFlcG+k7cPwRAh3OAKC7tlbO2Ar/MeZrT0d5LF8WE2tQTwCgi1u4
l53bjyxnyi9rjTLab5XqFiI=
=TyBJ
-----END PGP SIGNATURE-----





More information about the Snort-sigs mailing list